CVE-2021-38190 is a critical out-of-bounds memory access vulnerability affecting the nalgebra crate before version 0.27.1 for Rust, specifically due to a failure to validate the number of elements against the product of row and column counts. With a CVSS score of 9.8, this flaw allows for complete compromise of confidentiality, integrity, and availability with no user interaction or privileges required, making it highly severe. Despite its critical rating, there is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 0.27.1CPE matchmatch criteria | cpe:2.3:a:dimforge:nalgebra:*:*:*:*:*:rust:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2021-38190
Jun 11, 2024Out of bounds write in nalgebra
Aug 25, 2021An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count.
Aug 10, 2021